GO-2025-3817 Grafana is vulnerable to XSS attacks through open redirects and path traversal in github.com/grafana/grafana

Grafana is vulnerable to XSS attacks through open redirects and path traversal in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports fro...

CVE-2025-50738

creationtimestamp| type| source ---|---|--- 2025-07-29 17:12:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv4m3ubwc52z...

GHSA-526J-MV3P-F4VV

creationtimestamp| type| source ---|---|--- 2025-07-29 14:42:03+00:00| seen| https://bsky.app/profile/checkmarxzero.bsky.social/post/3lv4dooo6p223...

CVE-2025-8216

creationtimestamp| type| source ---|---|--- 2025-07-29 13:39:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv4a7i526y2w...

CVE-2025-53077

creationtimestamp| type| source ---|---|--- 2025-07-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-210-02...

CVE-2025-51385

creationtimestamp| type| source ---|---|--- 2025-07-29 08:08:41+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/45781 2025-07-31 19:42:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvbvfaphct2s...

CVE-2025-54662

creationtimestamp| type| source ---|---|--- 2025-07-29 06:46:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv3j4gsuag2o...

CVE-2025-54381

creationtimestamp| type| source ---|---|--- 2025-07-29 03:36:49+00:00| published-proof-of-concept| https://github.com/bentoml/BentoML/security/advisories/GHSA-mrmq-3q62-6cc8 2025-07-30 03:00:05+00:00| published-proof-of-concept| Telegram/ymfDcJJei73TCRKQzCboKGwK4pwFpRPmdZcBrNWP81VMIJA 2025-07-30...

CVE-2025-43215

creationtimestamp| type| source ---|---|--- 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-679/...

CVE-2025-43221

creationtimestamp| type| source ---|---|--- 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-691/ 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-690/ 2026-04-02 22:18:34+00:00| seen|...

PT-2025-33773

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the pptp xmit function related to insufficient checks on the size of the skb data structure. This can lead to reading uninitialized data, as...

SUSE CVE-2025-38495

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...

CVE-2025-50485

creationtimestamp| type| source ---|---|--- 2025-07-28 23:02:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2p5xykrx2d...

CVE-2025-32731

A reflected cross-site scripting xss vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium 7.3.5.860. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerabilit...

CVE-2025-30754

creationtimestamp| type| source ---|---|--- 2025-07-28 14:06:12+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luzr7lucmc22 2025-11-26 22:13:04+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m6kutniokc2l 2025-11-26 22:23:17+00:00| seen|...

CVE-2025-6241

creationtimestamp| type| source ---|---|--- 2025-07-28 13:54:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3luzqleupgi2y...

DEBIAN-CVE-2025-38495

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...

AZL-65916 CVE-2025-38495 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...

AZL-73464 CVE-2025-38495 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...

CVE-2025-38495

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...